Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

b5f1c27ecb...95.exe

windows7-x64

8

b5f1c27ecb...95.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5f1c27ecbba78618e5b0134bca4bf05141b767772c4856c8d21db49fd555095

  • Size

    303KB

  • Sample

    221203-r477vahh99

  • MD5

    ca38d458ca0f9124800d82272521350c

  • SHA1

    188e5a7a19b4fe78f3669171a94817c854ad9306

  • SHA256

    b5f1c27ecbba78618e5b0134bca4bf05141b767772c4856c8d21db49fd555095

  • SHA512

    944a5c53e0baf7320ba350647fdbe99f773a319f6a2c05e5af73116391007a45913a0fd340b0d58effb52bc1ed6e804871b0f0cc2e60b092209fc4eebaacf70c

  • SSDEEP

    6144:Jt9AuK7K47+46NvC24o3VO7fy9JT6RCFZL4w9rG8Fza+:fmHK47+M22mZp9rpz

Score
8/10
persistence

Malware Config

Targets

    • Target

      b5f1c27ecbba78618e5b0134bca4bf05141b767772c4856c8d21db49fd555095

    • Size

      303KB

    • MD5

      ca38d458ca0f9124800d82272521350c

    • SHA1

      188e5a7a19b4fe78f3669171a94817c854ad9306

    • SHA256

      b5f1c27ecbba78618e5b0134bca4bf05141b767772c4856c8d21db49fd555095

    • SHA512

      944a5c53e0baf7320ba350647fdbe99f773a319f6a2c05e5af73116391007a45913a0fd340b0d58effb52bc1ed6e804871b0f0cc2e60b092209fc4eebaacf70c

    • SSDEEP

      6144:Jt9AuK7K47+46NvC24o3VO7fy9JT6RCFZL4w9rG8Fza+:fmHK47+M22mZp9rpz

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks